$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft File: 8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft (raw, json) Hash identifier: 3EAhC9OmmNEo8rR2b+8XfAGoCELDJjWELrIlTqn/trE= Subject key identifier: BA:00:50:65:23:C1:A6:0E:21:CD:BF:0F:44:DF:5E:0F:F7:B4:68:6E Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 Certificate issuer: /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Certificate serial: 010D0C9F4328584B127212A0932CC2C668C41020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft Manifest number: 010D0C9F43285843FEF07D6FC52B221009C8A147 Signing time: Wed 03 Sep 2025 13:02:03 +0000 Manifest this update: Wed 03 Sep 2025 13:02:03 +0000 Manifest next update: Fri 05 Sep 2025 15:00:00 +0000 Files and hashes: 1: 1db59adf-1c3f-305d-ba11-7cfd01fc258e.roa (hash: AEzjLy+AGF9dHHaNo34SjIFZ+0qJtAo1sQ0M7XPQ6tA=) 2: 8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl (hash: MHCiNQb+jU4VVQIVotf0keI/rn7QTdKFlsHus15W9uk=) 3: a91f6701-0585-395e-ad18-03c9b663d0f6.roa (hash: bbPxKdyAh0OY+ZheFHvlEFZlTJIQgfR0e1fxcpUHvLE=) 4: bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa (hash: BLh1Q4DmOmi43NIGjL3fgY1Hs4xScTFM/yYTo/nKtBY=) 5: e0a99b37-83c7-3f95-af2f-eef604da1fd4.roa (hash: PigJuUs0lsuFTzll+G5SagAXwzdRXIIvsz/GmzKuvr4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:72:12:a0:93:2c:c2:c6:68:c4:10:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Validity Not Before: Sep 3 13:02:03 2025 GMT Not After : Sep 5 15:00:00 2025 GMT Subject: CN=503f1c49-5cf9-42fb-8ea5-20dc6a44ebd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c0:4c:fc:f4:f3:0e:b6:77:dc:7c:10:8c:14: 3e:b4:93:9c:b8:1b:03:b8:29:41:47:1b:fe:81:50: a6:fe:54:77:0d:d5:3c:7e:10:1e:7d:0c:09:45:ca: a9:80:46:ec:d4:28:86:94:09:61:0f:93:94:01:3c: f1:b4:97:18:72:ed:fb:e5:f3:cb:5a:81:65:88:c1: 84:1c:8b:73:56:a9:30:f0:0d:8c:c2:36:e1:ea:f7: 6d:c5:61:b8:14:3a:da:8d:68:82:e2:3e:6b:e8:cf: 74:85:12:4a:16:df:6e:6b:db:1b:1b:17:1d:ef:c5: 10:c2:14:29:7d:8d:4a:07:b3:a6:3e:9b:49:3a:9e: ce:34:f8:9c:87:37:b4:8c:8a:d9:e0:e6:e0:d7:3e: 44:b1:ef:17:a1:32:7b:d9:f4:4d:20:64:8a:1a:24: 6b:da:55:13:e7:a4:62:93:f3:70:e8:a9:f4:c8:b7: 9e:4b:96:0d:e8:f8:15:09:70:72:03:90:65:b3:d4: a1:4f:5d:4e:d2:1a:e4:6c:d4:3e:24:e4:6b:3e:a4: b0:f3:2d:b5:37:3b:f3:c0:a8:bd:ce:fb:ee:de:4a: 77:ac:29:11:65:a0:ba:0b:3c:ec:74:6a:be:77:7d: d9:90:0b:53:68:ed:6b:92:79:54:16:f4:79:d7:2d: 39:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:00:50:65:23:C1:A6:0E:21:CD:BF:0F:44:DF:5E:0F:F7:B4:68:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl X509v3 Authority Key Identifier: keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:92:37:7c:56:7b:51:7d:dd:00:e7:28:55:d1:b4:5f:55:10: 05:fd:84:bb:d1:3d:3c:76:e3:d8:0f:64:8e:e1:27:19:1e:62: 4e:43:b7:b0:d8:38:ea:ad:53:2e:3e:74:86:cf:c4:7c:45:5c: 3a:9b:66:f4:93:57:6b:6d:07:2d:76:3b:4a:ab:dc:10:6f:3d: d8:a8:2a:13:66:2f:26:31:7e:8f:d5:7c:c7:7a:bf:92:4c:95: 52:8d:6c:98:5e:c4:6d:6f:96:4e:49:32:ed:fa:68:27:c1:b1: d0:1c:73:dc:e7:e5:40:cc:fb:67:83:30:92:09:49:1c:a5:21: da:1a:46:62:76:a8:bf:37:cf:2e:8c:b8:91:e8:1a:72:25:2a: ed:2a:14:d8:f1:3a:cb:81:d1:c8:de:62:ac:d6:c0:bd:97:59: 16:52:29:27:e4:11:8d:25:8b:2b:bf:40:5a:fa:70:f1:d7:ac: 77:3e:43:a1:ac:36:c2:6a:a6:35:05:a8:8b:28:0f:c3:1a:3a: fd:f1:69:8d:aa:a1:9a:ad:50:10:9b:1b:bb:1f:ec:62:c0:29: 84:04:fb:21:97:75:6b:1e:ec:5f:91:58:d2:51:38:fb:e5:27: aa:77:21:63:d4:40:07:d1:c3:c3:22:c0:a1:48:46:6c:1f:b1: 0f:1d:1c:81 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEsSchKgkyzCxmjEECAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0 OWY4MB4XDTI1MDkwMzEzMDIwM1oXDTI1MDkwNTE1MDAwMFowLzEtMCsGA1UEAxMk NTAzZjFjNDktNWNmOS00MmZiLThlYTUtMjBkYzZhNDRlYmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8BM/PTzDrZ33HwQjBQ+tJOcuBsDuClBRxv+ gVCm/lR3DdU8fhAefQwJRcqpgEbs1CiGlAlhD5OUATzxtJcYcu375fPLWoFliMGE HItzVqkw8A2Mwjbh6vdtxWG4FDrajWiC4j5r6M90hRJKFt9ua9sbGxcd78UQwhQp fY1KB7OmPptJOp7ONPichze0jIrZ4Obg1z5Ese8XoTJ72fRNIGSKGiRr2lUT56Ri k/Nw6Kn0yLeeS5YN6PgVCXByA5Bls9ShT11O0hrkbNQ+JORrPqSw8y21NzvzwKi9 zvvu3kp3rCkRZaC6CzzsdGq+d33ZkAtTaO1rknlUFvR51y05UwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLoAUGUjwaYOIc2/D0TfXg/3tGhuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQz M2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvOGU0MzNjMWYtYTA3Mi00 ZGZkLTgwOTYtYzZjODYzNGE0OWY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGU0MzNjMWYtYTA3Mi00ZGZkLTgw OTYtYzZjODYzNGE0OWY4LzhlNDMzYzFmLWEwNzItNGRmZC04MDk2LWM2Yzg2MzRh NDlmOC5jcmwwHwYDVR0jBBgwFoAUf5Rf3H0zcSnURH4cJ0ZvWGrU4icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4 NjM0YTQ5ZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAukjd8VntRfd0A5yhV0bRf VRAF/YS70T08duPYD2SO4ScZHmJOQ7ew2DjqrVMuPnSGz8R8RVw6m2b0k1drbQct djtKq9wQbz3YqCoTZi8mMX6P1XzHer+STJVSjWyYXsRtb5ZOSTLt+mgnwbHQHHPc 5+VAzPtngzCSCUkcpSHaGkZidqi/N88ujLiR6BpyJSrtKhTY8TrLgdHI3mKs1sC9 l1kWUikn5BGNJYsrv0Ba+nDx16x3PkOhrDbCaqY1BaiLKA/DGjr98WmNqqGarVAQ mxu7H+xiwCmEBPshl3VrHuxfkVjSUTj75SeqdyFj1EAH0cPDIsChSEZsH7EPHRyB -----END CERTIFICATE-----Generated at Wed Sep 3 15:16:30 2025 by rpki-client